Error: Unable to establish secure connection to KMIP server "x.x.x.x"
Applies to
- ONTAP 9.5P16
- NetApp Storage Encryption (NSE)
- NetApp Volume Encryption (NVE)
- External Key Management (EKM) / KMIP Server
Issue
Attempts to configure external key-manager fail with SSL error:
Thu Dec 09 2021 09:17:51 -06:00 [kern_audit:info:2364] 8003e800002d0478:8003e800002d0544 :: cluster:ssh :: pii_encrypt/J4EyjOmWY1DsTic0JiD+prK0w6QXpkxe6bjb6dyDaovP9TEX3wAzvAQytkb87Ect/pii_encrypt :: cluster:admin :: security key-manager add -address x.x.x.x -server-port 5696 :: Error: Unable to establish secure connection to KMIP server "x.x.x.x". Use the "security certificate show -type server-ca -subtype kmip-cert" command to verify that the correct server-ca certificate has been installed for the specified KMIP server.